Automate Homebrew tap and Scoop bucket updates on release

[frostebite]

Summary

• Homebrew (game-ci/homebrew-tap) and Scoop (game-ci/scoop-bucket) both pin an exact CLI version + checksums and don't auto-track GitHub releases. Every release has needed a manual follow-up edit to both repos - this got missed entirely for v0.1.51 and had to be done by hand for v0.1.52.
• Adds an update-package-managers job to release-cli.yml that runs after a real published release, downloads the new checksums.txt, and pushes the version/url/sha bump directly to both repos' main (same direct-push pattern already used for the manual bumps to these two mechanical repos - not gated behind a PR review).
• The actual file edits are in two small scripts (scripts/release/update-homebrew-tap.mjs, scripts/release/update-scoop-bucket.mjs) so they're testable/runnable standalone rather than buried in YAML.

Auth

Uses a TAP_BUCKET_PAT repo secret on game-ci/cli, already set - it's the maintainer's existing broad personal token (repo + workflow scope), not a dedicated fine-grained PAT. That means it grants push access to every repo the token owner can write to, not just these two; both target repos are public, so this is a real (if low-probability, given the job only ever runs on release: published) blast-radius tradeoff. Worth tightening to a fine-grained PAT scoped to only homebrew-tap/scoop-bucket later if that's ever a concern - noted in a comment at the point of use in the workflow.

Test plan

• Both update scripts verified locally against the real, current Formula/game-ci.rb and bucket/game-ci.json, bumping to a throwaway version and diffing against the real files - only the version line and the intended url/sha256 (or url/hash) fields changed, nothing else.
• actionlint passes clean on the modified release-cli.yml.
• End-to-end: only provable by actually publishing the next real release - can't dry-run a release: published trigger.

🤖 Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

Next included review available in 54 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 7ca38e54-36c3-4226-a69a-1f195874ba38

📥 Commits

Reviewing files that changed from the base of the PR and between 020fb02 and 8efb28e.

📒 Files selected for processing (3)

• .github/workflows/release-cli.yml
• scripts/release/update-homebrew-tap.mjs
• scripts/release/update-scoop-bucket.mjs

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}